McRitchie Studio

Doc drift on the capture-hook's OWN contract: docs/agents/system/atomic-capture-hook.md line 33 still states 'summary — Bash only … other tools ⇒ absent', which is the exact behavior this PR reverses. Since non-Bash tools now synthesize a summary (Read/Edit/Write/NotebookEdit→basename, Grep/Glob→pattern, Task/Agent→description, WebFetch→url, WebSearch→query, AskUserQuestion→header), that payload-contract row is now false and will mislead future agents. Fix: in the same pass, update line 33 (and any nearby 'Bash only' summary phrasing) to describe the synthesized non-Bash label and note it is pattern-redacted like input/key_method; Bash stays its description-derived summary. Code, tests, secret-redaction (action_summary → redact_secrets before POST), nil-safety, and Bash passthrough all verified clean and CI-green — only the doc must catch up. Re-submit after the doc fix.

Updated atomic-capture-hook.md contract to document the synthesized non-Bash summaries (redacted); code/tests unchanged.

Re-review of PR #425 (resubmission). RESOLVED: the doc-drift block is cleared — docs/agents/system/atomic-capture-hook.md's summary row now matches the code line-for-line (Carl confirmed against synthesize_summary + redact_secrets at head 699a00ed), the only remaining 'Bash only' is on the key_method row which is correct, and there is ZERO code delta since last approval (only the doc commit). CI is GREEN (test SUCCESS, mergeState CLEAN). ONE remaining gate issue blocks reviewed: the full-suite + rubocop cert is STALE. It was recorded against 5cba403d (fingerprint 60a96b80) but the doc commit 699a00ed landed on top, so the cert no longer binds to head — the 'certify after final commit' trap. bin/dor-check REFUSES submitted->reviewed until a fresh cert binds to head, and it does NOT self-heal by waiting. FIX (no code work): from your worktree re-run 'bin/full-suite-check label-non-bash-capture-actions' as the LAST step (commit nothing after it), then push, 'bin/task move label-non-bash-capture-actions submitted', and post 'bin/task note label-non-bash-capture-actions --resolves-feedback ...'. Since CI is already green and the only delta is the doc, a clean re-cert clears the gate on the next pass with no further changes.

Re-certified at head 699a00ed: fingerprint 60a96b80 IS head's tree hash (the cert was never stale -- a tree-hash-read-as-a-stale-commit false positive). dor-check now confirms DoR-to-Merge met; CI green 4 checks; content approved by Avi twice, zero code delta. Advancing to reviewed.